Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zDuvFGYFNXeWRgwT-MQijawTIBE.roa
File:                     zDuvFGYFNXeWRgwT-MQijawTIBE.roa (raw, json)
Hash identifier:          FN5P/PvTNeLxkCd7TohrY4z+wjSvgfPWlHqRcaHM88U=
Subject key identifier:   CC:3B:AF:14:66:05:35:77:96:46:0C:13:F8:C4:22:8D:AC:13:20:11
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186FB59236F17A8272F7F3E3398C0EB9BFC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zDuvFGYFNXeWRgwT-MQijawTIBE.roa
Signing time:             Sun 19 Mar 2023 19:29:28 +0000
ROA not before:           Sun 19 Mar 2023 19:29:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200950
IP address blocks:        2a10:cc45:12f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fb:59:23:6f:17:a8:27:2f:7f:3e:33:98:c0:eb:9b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 19 19:29:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc3baf146605357796460c13f8c4228dac132011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f9:74:0c:2b:49:e9:f4:3a:56:95:33:f6:00:
                    2c:10:40:52:62:f2:7e:0a:48:95:bb:29:a4:39:96:
                    62:e4:bf:72:a1:bf:fb:7f:44:47:5f:40:30:6f:76:
                    56:10:9f:50:cf:3c:d4:62:ec:34:38:49:c5:e4:03:
                    67:95:37:c5:28:ad:b8:53:f9:ba:b7:69:29:3d:90:
                    8d:43:2c:a5:33:64:0f:a8:d1:15:92:d0:59:54:0f:
                    3c:d2:4d:05:ef:04:49:cf:01:7d:c6:e3:f2:a5:76:
                    86:23:27:e8:e6:ba:09:2e:0b:24:32:9f:b8:57:51:
                    5d:ee:d9:3a:7a:2e:b4:08:6b:75:ea:25:1d:92:8c:
                    4c:1a:2a:0f:8d:f8:a4:fe:23:a1:be:38:b4:84:d7:
                    1b:d6:60:6f:7e:f9:2d:af:e4:c0:f5:16:5c:c1:96:
                    a0:68:1f:07:cc:66:9d:68:19:c5:be:77:2e:2d:6b:
                    7c:be:cd:46:71:cc:07:86:77:b9:55:6d:9f:42:ea:
                    cd:88:96:5b:40:e7:1a:57:17:7e:0c:2f:7b:70:51:
                    f1:4d:81:1d:20:af:71:69:fe:04:38:df:8e:0b:56:
                    f3:9e:8b:97:a9:ec:ad:f1:38:1d:44:64:cb:b5:b0:
                    3c:02:17:51:7b:5d:93:81:a0:ec:b0:8a:d7:6b:26:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3B:AF:14:66:05:35:77:96:46:0C:13:F8:C4:22:8D:AC:13:20:11
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zDuvFGYFNXeWRgwT-MQijawTIBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc45:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:76:e5:3e:92:5b:5f:3f:12:be:39:3b:36:f4:eb:f9:9b:18:
         e1:fb:11:35:ce:b5:87:24:a3:ca:e6:84:08:a6:10:ff:7d:85:
         17:46:82:d6:05:c4:8d:c3:38:f3:39:df:3a:79:ee:95:38:b0:
         ed:79:6f:0a:ee:71:68:74:86:99:0d:7c:f8:6b:85:6f:7e:cd:
         e2:7a:86:3b:c4:87:b4:7f:fe:71:56:d5:79:e6:d6:60:63:c4:
         07:1d:ae:73:da:da:32:2e:71:06:39:87:10:f6:bf:11:0e:0a:
         2e:7d:be:a2:d8:e9:ee:63:8a:2b:a9:34:ac:89:dd:b4:bb:86:
         1e:98:b9:cb:22:0f:e4:c2:58:ad:5c:8e:b8:be:82:fd:79:1d:
         49:7c:5b:67:c3:68:07:16:fe:ac:98:9a:0f:d2:19:a3:be:0a:
         32:12:05:2e:69:e6:2f:4f:fd:b8:8a:21:7a:13:b0:5b:59:2e:
         91:43:47:3f:a0:97:5d:d5:30:7d:6a:48:0c:5b:c2:b1:d6:38:
         6a:07:f7:16:fd:37:f5:ff:84:53:47:9c:d3:6e:02:9a:c0:c2:
         c0:5a:0d:3a:86:0c:45:a9:cc:3c:e4:bb:9a:d5:e5:d7:16:02:
         88:79:64:54:80:9a:f8:9e:39:b6:52:24:29:a4:4d:8a:b1:94:
         9c:7c:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----